Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/68a4b2-5894-47c5-be01-66aa2a23239e/1/I-RRZMVy7d5d8lORfMEqLf05i5c.mft
File:                     I-RRZMVy7d5d8lORfMEqLf05i5c.mft (raw, json)
Hash identifier:          HmuhrGoT7BRy4UN+e09QqUETfvpXSlCMdxnbbhK7hTo=
Subject key identifier:   02:07:7F:50:D8:B1:40:4A:40:B5:AE:40:D4:E6:D6:2A:5F:D2:63:96
Authority key identifier: 23:E4:51:64:C5:72:ED:DE:5D:F2:53:91:7C:C1:2A:2D:FD:39:8B:97
Certificate issuer:       /CN=23e45164c572edde5df253917cc12a2dfd398b97
Certificate serial:       01962E98D4B281843D0EA09CA84ADAEBB8E0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/I-RRZMVy7d5d8lORfMEqLf05i5c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9b/68a4b2-5894-47c5-be01-66aa2a23239e/1/I-RRZMVy7d5d8lORfMEqLf05i5c.mft
Manifest number:          05BA
Signing time:             Sun 13 Apr 2025 10:01:29 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:29 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:29 +0000
Files and hashes:         1: I-RRZMVy7d5d8lORfMEqLf05i5c.crl (hash: swPW2JlzJjDhUzcHLvDBvyK2drAulxrbhkmyfNLvnJs=)
                          2: Qf0cAOk73br7c02Yp4LiYn6tSvI.roa (hash: Uq615z1vQ76UBbAOWh8ANumqrOuVi1i2JY2ord8ybMc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:d4:b2:81:84:3d:0e:a0:9c:a8:4a:da:eb:b8:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23e45164c572edde5df253917cc12a2dfd398b97
        Validity
            Not Before: Apr 13 10:01:29 2025 GMT
            Not After : Apr 14 10:01:29 2025 GMT
        Subject: CN=02077f50d8b1404a40b5ae40d4e6d62a5fd26396
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:0c:5d:a7:3b:ce:f6:50:a3:22:d0:ec:8b:61:
                    fa:a6:af:be:97:6c:56:1e:c6:16:83:9f:d3:cf:cb:
                    a1:72:21:43:22:9c:a8:1b:ca:15:14:08:86:ea:7d:
                    69:2c:3d:6c:db:6d:8f:b1:fb:56:9b:08:0b:f2:b4:
                    cf:56:d2:68:ae:7f:c0:a1:46:d2:c6:e7:3f:c4:30:
                    11:7f:f0:33:0b:6a:0e:9f:9d:c4:a1:02:75:4e:13:
                    c8:7a:2f:ed:52:b9:8a:3c:84:81:ac:e9:75:b3:9f:
                    8c:71:ee:10:a2:ba:20:78:4d:66:b5:c9:e3:8a:f0:
                    70:81:c5:08:7e:46:53:ab:b5:41:40:6b:35:35:cc:
                    7a:3c:41:17:d1:65:1a:81:aa:90:83:1f:f2:8d:ed:
                    f8:4f:ec:cc:b6:c4:f4:6c:a8:3f:50:02:94:81:8e:
                    78:cb:a0:13:f3:c8:40:fd:82:50:48:ad:d9:58:87:
                    5a:19:9d:41:a8:f4:e3:b6:81:51:95:dd:58:f3:14:
                    d9:4c:5e:c6:e8:9d:41:5c:f9:0e:ee:30:4c:29:52:
                    25:7e:cc:fc:b9:d2:a4:bf:31:c3:83:c4:33:6d:61:
                    8f:53:4e:89:9e:46:cb:6d:7e:1f:5e:a5:ef:88:39:
                    6f:14:08:1e:7f:d5:ee:fd:f1:c2:55:7e:3f:d9:66:
                    1b:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:07:7F:50:D8:B1:40:4A:40:B5:AE:40:D4:E6:D6:2A:5F:D2:63:96
            X509v3 Authority Key Identifier:
                keyid:23:E4:51:64:C5:72:ED:DE:5D:F2:53:91:7C:C1:2A:2D:FD:39:8B:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I-RRZMVy7d5d8lORfMEqLf05i5c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/68a4b2-5894-47c5-be01-66aa2a23239e/1/I-RRZMVy7d5d8lORfMEqLf05i5c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/68a4b2-5894-47c5-be01-66aa2a23239e/1/I-RRZMVy7d5d8lORfMEqLf05i5c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:b5:53:5f:b6:f2:94:f9:09:80:fa:87:6e:e4:6d:89:9e:b8:
         be:d6:95:b2:70:6b:ca:5a:5f:47:2f:df:d3:af:ff:ca:f8:67:
         08:76:42:bc:fb:00:b3:02:14:30:4f:6e:66:d6:c1:76:bb:57:
         03:eb:46:66:9e:b8:b6:d0:bf:c5:8b:49:e6:51:d6:57:71:2b:
         cc:39:c2:5e:5b:08:11:0c:a7:c7:eb:03:9b:55:0b:dd:c5:c7:
         d1:08:c5:31:c4:44:b0:f4:d6:f4:fe:1a:6f:4c:8d:72:f4:fd:
         36:06:db:f0:5b:fe:2e:ee:af:e9:4d:53:54:7c:f3:c4:a3:a9:
         42:c8:3a:25:eb:5c:a5:48:09:af:92:79:7b:8a:0c:14:db:f7:
         61:c6:bc:cd:a1:38:fc:b6:c2:f1:96:55:9d:0d:db:33:ef:fb:
         4f:88:57:52:a4:c6:52:f7:0e:ef:7e:17:2d:a3:f1:c1:b3:12:
         cb:3a:94:28:83:43:2a:cb:72:a6:a5:d7:7d:22:d0:58:64:4e:
         26:c7:c9:09:6b:ab:70:4f:12:b6:55:73:6a:e9:c5:85:2d:7a:
         98:1e:42:bb:32:b8:4e:78:61:98:7f:88:dd:b9:d1:43:b2:85:
         53:c4:9b:b3:b8:c9:b8:bb:25:f3:f2:94:c4:f6:0f:2a:09:4f:
         2f:6f:df:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----